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providing a first network element having an interception function for intercepting 
data\packets; 

b) controlling said interception function by an interception control means 
implemented^ a second network element; and 

c) transmitting an intercepted data packet from said first network element via said 
packet network to an interception gateway element providing an interface to at least 
one intercepting authoH^y. 

2. (AMENDED) A method^ccording to claim 1 , wherein said interception gateway 
element is integrated in said second network element. 



3. (AMENDED) A method according to claim 1 , wherein a header of a data packet 

packets to 



is read by said network element and data pac 



be intercepted are duplicated. 



4. (AMENDED) A method according to claim 1 , \Merein said intercepted data 
packet is transmitted to said interception gateway element using a secure tunnel. 

5. A method according to claim 4, wherein said secure tunnel is implemented by 
an encryption processing. 



6. (AMENDED) A method according to claim 1 , wherein said intercepted data 
packet is transmitted via interworking units and encrypted between said interworking 
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units, when said first network element and said interception gateway element are 
arranged in separate network segments. 

7. (AMENDED) A method according to claim 1 , wherein said first network element 
is provided in each network segment of said packet network. 

8. (AMENDED) \method according to claim 1, wherein received intercepted data 
packets are collected in said interception gateway element and supplied to an 
interface of said at least one^jntercepting authority. 

9. A method according to claimsS, wherein said interface comprises a first 
interface for administrative tasks, a second interface for network signaling, and a third 
interface for intercepted user data. \ 

10. (AMENDED) A method according to clairh 1 , wherein said intercepting function 
comprises a packet sniffing and filtering function. \ 

11. A method according to claim 10, wherein said intercepting function is 
implemented in the Gn interface. \ 

12. (AMENDED) A method according to claim 1, wherein said interception function 
comprises reading data packets, analyzing the header of the data packets as to 
whether the data packet should be intercepted or not, and transmitting the data packet 
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to said interception gateway element, and a management function for interception and 
transmission criteria. 

1 3. (AMENDED) A method according to claim 1 , wherein an alarm is transmitted to 
said interceptic-fo gateway element and all interception information of a respective 
network element is deleted, when a breakage of a casing of the respective network 
element has been detected. 

14. (AMENDED) A memod according to claim 1 , wherein fake packets are 
transmitted from said netwonVelement to said interception gateway element. 

15. (AMENDED) A method according to claim 14, wherein said fake packets are 
transmitted at random or triggered at any passing packet, such that the total load of 
intercepted and fake packets transmitted to. said interception gateway element is 
constant. \ 

16. (AMENDED) A method according to claim 1 Vherein said intercepted data 
packet is padded to a maximum length. \ 

17. (AMENDED) A method according to claim 1 , whereirka time information is 
added to said intercepted data packet. \ 
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18. (AMENDED) An interception system for performing a lawful interception in a 
packet network, comprising: 

a) afirst network element having an interception function for intercepting data 



ar^ i 



packets aro^ comprising a transmitting means for transmitting an intercepted data 

\ 

packet to saicl\packet network; 

b) an interception control means implemented in a second network element and 
controlling the interception function; and 

c) an interception gateway element having a receiving means for receiving said 



intercepted data packet ar^l an interface means for providing an interface to at least 
one intercepting authority. 

19. (AMENDED) A system according to claim 18, wherein said second network 
element corresponds to said interception gateway element. 



20. (AMENDED) A system according to claiirrdS, wherein said first network 
element further comprises an encrypting means for encrypting said intercepted data 
packet. 

21 . (AMENDED) A system according to claim 18, wherein ^aid first network 
element further comprises a means for generating fake packets be transmitted with 
said intercepted data packets. 
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22\ (AMENDED) A system according to claim 1 8, wherein said first network 
element comprises a reading means for reading a header of a received data packet 
and fotNduplicating a data packet to be intercepted. 



23. (AMENDED) A system according to claim 22, wherein said reading means is 
arranged to pao\said copied data packet to a maximum length. 

24. (AMENDED) ANsystem according to claim 18, wherein said first network 
element is a gateway element of said packet network. 

25. (AMENDED) A system according to claim 1 8, wherein said first network 
element is a BG, an SGSN or a GGSN. 

26. (AMENDED) A system according to claim 24, wherein an interception 
information defining a data packet to be intercepted is included in a context information 
supplied to said first network element and useaNfor routing data packets. 

27. (AMENDED) A system according to claim 26, vvherein said interception control 
means comprises a storing means for storing an interception list, and wherein said 
interception control means is arranged to add said interception information to said 
context information supplied to said first network element. \ 



\ 

28. (AMENDED) A system according to claim 1 8, wherein said first network 
element is arranged in each segment of said packet network. 

29. (AI\JlENDED) A system according to claim 18, wherein said first network 
element comVises a control means for controlling interception and encryption 
processing in accordance with an interception setting instruction received from said 
interception controkmeans. 

30. (AMENDED) A system according to claim 18, wherein said interception 
gateway element comprises^ memory means for storing received intercepted data 
packets before supplying thenrto said interface means. 

31 . (AMENDED) A system acconsHng to claim 30, wherein said interception 
gateway element comprises a decryption means for removing an encryption of the 
received intercepted data packets, an extraction means for extracting intercepted data 
packets from fake data packets, and a meank for adding a time information to said 
received intercepted data packets before storingythem in said memory means. 

32. (AMENDED) A system according to claim 18\wherein said first network 
element comprises a detecting means for detecting a malfunction and/or breakage 
thereof, and signaling means for signaling an alarm to said v interception gateway 
element in response to an output of said detecting means. 



33. (AMENDED) A network element for a packet network, comprising: 
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a) \ an interception means for intercepting a data packet received from said packet 
network\and 

b) a transmitting means for transmitting said intercepted data packet via said 
packet network tq ar ^terception ga te way^l ement, 

c) wherein said interception means is controlled by an interception control means 
arranged in another network element. 

34. (AMENDED) An intersection gateway element for an interception system of a 

^ i ii r 

packet network, comprising: 

a) a receiving means for receiving "hn intercepted data packet via said packet 
network from a network element having aniqterception function; and 

b) an interface means for providing an interface to an intercepting authority. 



35. (AMENDED) An interception gateway element ab^ording to claim 34, further 
comprising an interception control means for controlling sat^ interception function of 
said network element. 
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